For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

gmjoen_33163's avatar
gmjoen_33163
Icon for Nimbostratus rankNimbostratus
Mar 04, 2010

virusscanning using a proxy

We are using our LTM to loadbalance traffic for two app.servers. The traffic is soap/xml and works very good.

 

 

Now we would like to introduce a virusscanning solution. We are considering an appliance box which then will act as a proxy.

 

 

So the question:

 

I cant see any where in the LTM configuration that there is a possibility to specify a proxy for a certain node or pool.

 

Is there such a parameter somewhere? Is there some other way to route the traffic via the appliance box? do you think it would be possible to create an irule to send the traffic via the proxy server?

 

 

Regards,

 

Gaute

 

 

config
design

4 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 04, 2010
    Hi Gaute,

     

     

    I've heard vague references to F5 considering a tie-in with an antivirus company so you could potentially do virus scanning locally on LTM. You might check with your F5 account rep to see if there is anything more concrete about this now.

     

     

    Else, you could try to send a full payload or HTTP parameter to a sideband AV server for validation, but you'd be limited to 4Mb--so I don't think there is a practical way to do this with LTM right now. See this post for details:

     

     

    Virus scan attachments

     

    http://devcentral.f5.com/Default.aspx?tabid=53&forumid=31&tpage=1&view=topic&postid=3081430847

     

     

    Aaron
  • jrahmDCnew_4699's avatar
    jrahmDCnew_4699
    Icon for Nimbostratus rankNimbostratus
    Mar 04, 2010
    I'm not sure how efficient it would be, but it's possible. Deb wrote an article on making external calls a while back:

     

     

    http://devcentral.f5.com/Default.aspx?tabid=63&articleType=ArticleView&articleId=105 Click here
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Mar 05, 2010
    LOL... Nope, just carelessness. I try to post only as citizen_elah, but sometimes I'm testing with different accounts and forget.